Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a3834353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231353a3834353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          kZJXvlV97TfkMhEvTUvuXlf7I3keuAf8SQjP6GVY38w=
Subject key identifier:   AC:C4:92:65:C0:7F:E5:49:9D:0A:63:68:BB:F6:CA:E9:60:BA:F8:EF
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       210BD5A0952DC05A54E52136644610C6AF6F674C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a3834353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 15 Feb 2022 08:45:01 +0000
ROA not before:           Tue 15 Feb 2022 08:40:01 +0000
ROA not after:            Tue 14 Feb 2023 08:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:215:845::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0b:d5:a0:95:2d:c0:5a:54:e5:21:36:64:46:10:c6:af:6f:67:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 15 08:40:01 2022 GMT
            Not After : Feb 14 08:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:51:c9:b1:fc:bb:56:f9:8c:5c:9c:ae:0b:
                    d8:a3:61:b3:80:98:73:d1:da:09:f7:e5:20:77:22:
                    6f:96:a6:05:e7:df:1f:d2:b3:3d:fd:a8:d3:49:76:
                    e6:a9:c5:ea:30:3a:3a:c2:d5:2a:57:b7:91:e3:79:
                    e0:75:f2:ab:ad:43:d6:16:b1:0f:5c:78:1e:db:77:
                    50:9f:81:40:88:bb:f3:30:68:c3:9b:93:b7:a8:e0:
                    99:b6:ad:71:1b:4f:eb:bb:cd:d9:7f:cc:38:4d:b8:
                    3e:c3:2c:0b:37:42:ea:5e:f4:33:ee:fb:83:58:28:
                    f6:37:6c:27:c6:4a:c7:e5:0d:de:80:c4:dc:9b:9b:
                    32:61:b6:b9:1e:58:20:53:34:b6:3b:1f:2b:c2:4c:
                    d3:fd:05:cc:34:a4:d6:86:6a:64:1e:a4:09:e7:37:
                    7c:98:51:ef:a0:85:97:4c:0b:d6:6f:c8:7a:8d:1a:
                    6b:fa:75:38:b3:75:69:b6:13:d4:59:ed:61:49:a1:
                    b2:af:3a:fc:ef:b7:9e:3f:3c:c3:03:4e:9f:89:06:
                    e6:7c:30:6b:e8:3b:e5:1d:37:f5:5e:de:8e:d9:ba:
                    13:52:49:53:bb:1d:ea:6e:27:88:ca:3a:3f:76:e1:
                    c4:52:22:24:9d:7e:02:a0:73:4a:eb:24:6f:16:da:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C4:92:65:C0:7F:E5:49:9D:0A:63:68:BB:F6:CA:E9:60:BA:F8:EF
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a3834353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:215:845::/80

    Signature Algorithm: sha256WithRSAEncryption
         8c:09:7c:3c:c4:bb:a7:47:d6:0a:47:93:b7:81:26:38:c0:d1:
         30:97:a1:be:36:ac:b2:5e:9a:62:4b:e2:3e:55:b0:c0:e9:67:
         83:9a:ac:46:8b:a7:4f:d6:46:fc:99:4c:7c:f2:53:04:70:bd:
         f7:3a:84:65:1e:51:31:46:aa:21:3c:b8:8e:3c:e6:32:0d:06:
         e3:4d:bf:dc:c5:b9:47:2f:4d:0d:d9:53:cb:92:f4:2a:5e:dc:
         62:54:51:8c:3e:49:c8:42:cd:e4:f2:7d:2b:cb:ab:6e:f5:b7:
         b7:ff:db:55:79:8f:ae:22:22:57:af:10:5a:07:ef:fa:39:d2:
         12:e2:8c:63:cf:dc:d3:0b:8c:0d:e7:d2:99:06:16:f1:ec:64:
         c0:97:c3:50:26:15:ae:34:69:4c:99:3a:7b:5f:41:4b:d5:c5:
         a8:ce:c9:8b:0d:55:fe:d6:cc:91:04:b3:ef:2c:f7:47:3b:04:
         60:ed:76:7b:70:db:3a:36:c3:f5:79:2e:eb:18:0c:e0:58:0b:
         7e:b7:a1:76:ae:4c:6a:b6:c2:bb:6e:9a:48:a3:62:d0:a9:b7:
         39:6c:d1:a7:37:42:eb:a6:5c:71:63:85:be:13:3d:fe:43:28:
         45:bf:39:95:88:63:ba:9c:9b:64:11:83:81:bd:ee:92:c8:71:
         98:86:dd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----